10

CVE-2015-5568

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Data is provided by the National Vulnerability Database (NVD)
AdobeFlash Player Version <= 11.2.202.508
   LinuxLinux Kernel Version-
AdobeFlash Player Version <= 13.0.0.289
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version14.0.0.125
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version14.0.0.145
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version14.0.0.176
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version14.0.0.179
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.152
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.167
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.189
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.223
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.239
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version15.0.0.246
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version16.0.0.235
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version16.0.0.257
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version16.0.0.287
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version16.0.0.296
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version17.0.0.134
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version17.0.0.169
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version17.0.0.188
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version17.0.0.190
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version17.0.0.191
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version18.0.0.160
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version18.0.0.194
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version18.0.0.203
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version18.0.0.209
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeFlash Player Version18.0.0.232
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeAir Version <= 18.0.0.199
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeAir Sdk Version <= 18.0.0.199
   ApplemacOS X Version-
   MicrosoftWindows Version-
AdobeAir Version <= 18.0.0.143
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 31.84% 0.966
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.